PT-2022-6231 · Oracle · Oracle Web Applications Desktop Integrator

L1K3Beef · Published 2022-10-18 · Updated 2026-03-11 · CVE-2022-21587

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.11

Description A flaw exists in the Upload component of Oracle Web Applications Desktop Integrator within Oracle E-Business Suite. This issue allows an unauthenticated attacker with network access via HTTP to compromise the application. Successful exploitation can lead to a complete takeover of Oracle Web Applications Desktop Integrator. The vulnerability is easily exploitable and has been actively exploited in the wild. Analysis indicates that exploitation can be achieved through payloads based on Perl and Java Server Pages (JSP) for remote code execution. Reports suggest this issue was exploited as early as January 2023, with a proof-of-concept (POC) published in February 2023.

Recommendations Versions 12.2.3 through 12.2.11 should be updated to a newer, secure version. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Missing Authentication

Weakness Enumeration

CWE-306

CWE-20

Related Identifiers

BDU:2023-00572

CVE-2022-21587

Affected Products

Oracle Web Applications Desktop Integrator

References · 55

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/oracle_ebs_rce_cve_2022_21587.rb · Exploit
• 🔥 https://github.com/hieuminhnv/CVE-2022-21587-POC · Exploit
• 🔥 https://github.com/sahabrifki/CVE-2022-21587-Oracle-EBS- · Exploit
• 🔥 http://packetstormsecurity.com/files/171208/Oracle-E-Business-Suite-EBS-Unauthenticated-Arbitrary-File-Upload.html · Exploit
• 🔥❌ https://github.com/Zh1z3ven/Oracle-E-BS-CVE-2022-21587-Exploit · Exploit, Deleted
• https://bdu.fstec.ru/vul/2023-00572 · Security Note
• https://osv.dev/vulnerability/CVE-2022-21587 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21587 · Security Note
• https://twitter.com/transilienceai/status/1798900715085046170 · Twitter Post
• https://t.me/echeloneyes/1156 · Telegram Post
• https://twitter.com/transilienceai/status/1810859493552439356 · Twitter Post
• https://twitter.com/DefusedCyber/status/1975654524753723846 · Twitter Post
• https://twitter.com/CyberStoryNet/status/1770858472222913012 · Twitter Post
• https://twitter.com/transilienceai/status/1808503988666384496 · Twitter Post
• https://t.me/aptreports/13988 · Telegram Post